CVE-1999-0466: High severity netbsd netbsd vulnerability
The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
NetBSD /dev/wabi special device filefrom your environment.If SVR4/wabi support is not required, remove or disable the /dev/wabi device node or the wabi driver (for example remove the device node and ensure the driver is not loaded) to eliminate the ability for local users to read or write arbitrary files via this device.
- Configuration
Change the ownership and permissions of /dev/wabi to prevent access by unprivileged local users (for example: chown root:wheel /dev/wabi; chmod 0600 /dev/wabi) or apply appropriate device ACLs to limit access.
NetBSD /dev/wabi device device node permissions = restrict access to trusted users (e.g., root-only) - Operational
Audit the filesystem(s) associated with /dev/wabi for signs of unauthorized reads or writes, review local access logs for use of /dev/wabi, and restore any modified files from known-good backups as needed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0466?
CVE-1999-0466 is considered a high-severity vulnerability due to its ability to allow local users to access arbitrary files.
How do I fix CVE-1999-0466?
To fix CVE-1999-0466, upgrade to a version of NetBSD that is later than 1.3.3, where this vulnerability is addressed.
What are the affected versions for CVE-1999-0466?
CVE-1999-0466 affects NetBSD versions 1.3, 1.3.1, 1.3.2, and 1.3.3.
Who can exploit CVE-1999-0466?
CVE-1999-0466 can be exploited by local users who have access to the affected systems.
What type of vulnerability is CVE-1999-0466?
CVE-1999-0466 is a local file access vulnerability that allows unauthorized access to files through the /dev/wabi device.